Privacy Policy

Lighthouse (“Lighthouse,” “we,” “us”) is a Generative Engine Optimization monitoring web application operated by Blueridge Web Services LLC, a Florida limited liability company (Florida document #L24000126O2), doing business as BrainIT Consulting. Lighthouse is part of the DreamForge product line. We can be reached at support@dreamforgeworld.com.

• Account info:your name and email address (collected by our authentication library, better-auth). If you ever add a profile photo we’ll store the URL.
• Authentication data: hashed password, session tokens, IP address, and user agent for active sessions. We use these to keep you signed in and to detect suspicious activity.
• Workspace and organization data: the workspace name you choose, your role within it, and (for team accounts) the seats and roles of users you invite.
• Brand and competitor configuration:the brand name and domain you’re tracking, the up-to-10 competitor names and domains you list, and the prompts you author or accept from the AI suggestion tool.
• Scan results: the verbatim text responses returned by ChatGPT, Claude, Gemini, Perplexity, Copilot, and Google AI Overview when we run your prompts; the citations they emit; the derived metrics (mention rate, share-of-voice, rank position, sentiment) we compute from them.
• Playbook output: the AI-generated content recommendations we produce from your scan history (Claude reads the last ~30 days of results to rank moves).
• Audit log:a record of workspace bootstrap, scan triggers, configuration changes, identity changes, and billing events — kept for security and support.
• Billing info:Stripe customer ID and the purchase history of Dream Crystal packs on your workspace. Each purchase is a one-time charge — we don’t store subscription state because there is none. Your full card details never touch our servers; they go directly to Stripe.
• Email opt-ins: if you submitted your address to the pre-launch list on the marketing site, we store that and the source tag.

• To run the scans and dashboards you signed up for.
• To authenticate you and keep your workspace secure.
• To process payments and enforce per-pack prompt caps.
• To produce share-of-voice, rank, sentiment, citation, and playbook outputs from the six AI engines.
• To respond when you contact support.
• To investigate fraud, abuse, and upstream-provider terms-of-service violations.

To produce the scans you pay for, we send your prompts and brand/competitor namesto the AI engines you have enabled. We do not send your email address, billing data, or other account information to these engines. We send each prompt once per scan, identified only by an opaque scan identifier — no human-readable account metadata.

The AI engines may log your prompts under their own policies. For API providers (OpenAI, Anthropic, Google, Perplexity) we use enterprise / API-tier endpoints whose providers state they do not use the prompts to train their models, but you should review each provider’s own policy for current terms. Scraped engines (Copilot, Google AI Overview) are queried via BrightData on the public web.

We use the following services to operate Lighthouse. Each has its own privacy policy you may wish to review.

• Vercel— application hosting, serverless functions, edge middleware. Receives request metadata for routing.
• Neon— managed Postgres database storing your account, workspace, configuration, and scan-result data.
• Stripe— payment processing for one-time Dream Crystal pack purchases. Each purchase is a one-time charge; Stripe holds the payment-method details required to complete checkout. Lighthouse does not store card numbers.
• Resend— transactional email (account verification, password reset, billing notifications, future digests).
• Inngest— background-job orchestration for scan fan-out and scheduled runs. Receives scan metadata (workspace id, scan id, prompt count) but not personal information.
• Sentry— error monitoring for background jobs. Receives error stack traces and tags (function name, scan id); we do not include personal data in tags.
• Vercel AI Gateway— the routing layer that forwards model calls to the AI engine providers below. Does not store prompts beyond ephemeral inflight processing.
• OpenAI(ChatGPT) — receives your prompts and brand/competitor names to produce a response we record.
• Anthropic(Claude) — same. Also runs the playbook ranking step over your last 30 days of scan results.
• Google(Gemini) — same.
• Perplexity— same.
• BrightData— web-scraping infrastructure used to query Copilot and Google AI Overview on the public web. Receives the prompt strings as queries.

Account, workspace, and scan-result data are kept for as long as your account is active. If you delete your workspace, we delete the workspace row and its scan results, citations, prompts, and playbook within 30 days, except for records we are required to keep for tax (Stripe transaction history) or fraud-prevention reasons.

Audit-log entries are retained for 12 months for security investigations, then purged.

Sentry error data is retained according to Sentry’s default retention (currently 90 days for the free tier).

You can request a copy of, correction to, or deletion of your personal data by emailing support@dreamforgeworld.com. We aim to respond within 30 days. If you are in the EU, UK, or California you have additional statutory rights (GDPR, UK GDPR, CCPA/CPRA) including the right to data portability and the right to object to processing — we honor those on request regardless of revenue threshold.

Lighthouse does not sell or share your personal information for cross-context behavioral advertising. We do not use your scan data to train any model.

In line with the Florida Information Protection Act of 2014 (FIPA, Fla. Stat. § 501.171), if we determine that personal information of Florida residents has been accessed or acquired without authorization, we will notify affected individuals as expeditiously as practicable and in no event later than 30 days after determination of the breach, unless a law-enforcement delay applies or a federal-law requirement supersedes.

Although Lighthouse is below the revenue and data-broker thresholds that trigger the Florida Digital Bill of Rights (Fla. Stat. § 501.701 et seq.), we voluntarily honor the same access, correction, deletion, and opt-out rights for Florida residents who request them.

Lighthouse uses cookies only to keep you signed in (session cookie set by better-auth) and to remember the active workspace when you belong to more than one. We do not use third-party analytics, advertising, or tracking cookies on the application itself.

The marketing site (the landing page you arrived at before signing up) currently uses no analytics cookies. If that changes we’ll update this policy and add a banner.

Lighthouse is a B2B tool not directed at children. We don’t knowingly collect personal information from anyone under 18. If you believe a child has signed up, email us and we will delete the account.

We’ll update the “Last updated” date above when we change this policy. Material changes — new sub-processors, new data categories, or a change in how scan data is used — will be announced via email to the address on your account at least 14 days before they take effect.

Privacy questions: email support@dreamforgeworld.com. For data-subject access or deletion requests, please put “Privacy request” in the subject line so we can route it quickly.